More AVCs during boot

Felipe Alfaro Solana felipe_alfaro at linuxmail.org
Mon Sep 20 21:08:16 UTC 2004


Hi!

With selinux-policy-targeted, I get this during boot:

audit(1095721178.335:0): avc:  denied  { associate } for  pid=508 
exe=/sbin/restorecon name=initctl dev=tmpfs ino=1992 
scontext=system_u:object_r:initctl_t tcontext=system_u:object_r:tmpfs_t 
tclass=filesystem

audit(1095721179.084:0): avc:  denied  { associate } for  pid=721 
exe=/usr/sbin/setfiles name=initctl dev=tmpfs ino=1992 
scontext=system_u:object_r:initctl_t tcontext=system_u:object_r:tmpfs_t 
tclass=filesystem

which seem related related to "/dev/initctl".

audit(1095721179.097:0): avc:  denied  { associate } for  pid=721 
exe=/usr/sbin/setfiles name=.udev.tdb dev=tmpfs ino=366 
scontext=system_u:object_r:udev_tbl_t 
tcontext=system_u:object_r:tmpfs_t tclass=filesystem

which is related to /dev/.udev.tdb

audit(1095714008.289:0): avc:  denied  { setrlimit } for  pid=2218 
exe=/usr/sbin/named scontext=user_u:system_r:named_t 
tcontext=user_u:system_r:named_t tclass=process

related to bind

audit(1095714008.771:0): avc:  denied  { read } for  pid=2251 
exe=/usr/sbin/ntpd name=drift dev=hda2 ino=10289214 
scontext=user_u:system_r:ntpd_t tcontext=system_u:object_r:file_t 
tclass=file

related to ntpd.

Any ideas?




More information about the fedora-selinux-list mailing list